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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A method of guaranteeing failure notification in a distributed 
system operating on a plurality of nodes in a network, the method comprising: 

creating a failure notification group comprising the plurality of nodes, wherein the failure 
notification group has a unique identifier; 

associating with the unique identifier of the failure notification group a failure handling 
method of a distributed application running on some or all of the nodes of the failure notification 
group; 

each node in the failure notification group ascertaining whether a failure has occurred; 

each node in the failure notification group that has ascertained' a failure signaling a failure 
notification to each reachable node in the failure notification group, wherein each node in the failure 
notification group ascertains a failure or is notified of a failure; and 

each node in the failure notification group executing the failure handling method to perform 
an application level action in response to ascertaining a failure or being notified of a failure , wherein 
the nodes in the failure notification group are a subset of nodes in an overlay network, wherein 
creating a failure notification group includes creatine a multicast tree by sending a construction 
message to each node in the failure notification group, further comprising receiving a confirmation 
message, wherein the construction message is routed to each node in the failure notification group 
through an overlay routing path, and upon receiving the confirmation message, each node in the 
overlay routing path records a pointer to a preceding node, and wherein the confirmation message is 
routed through the overlay routing path in reverse, and upon receiving the confirmation message, 
each node in the reverse overlay routing path records a pointer to a preceding node . 

2. (Original) The method of claim 1 , further comprising disassociating the failure 
handling method from the unique identifier after the failure is ascertained and the failure handling 
method has been executed. 
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3. (Original) The method of claim 1, wherein creating a failure notification group 
includes: 

verifying that each node in the failure notification group exists; and 
generating the unique identifier for the failure notification group if each node in the failure 
notification group is successfully contacted. 

4. (Original) The method of claim 3, wherein creating a failure notification group 
includes executing the failure handling method if each node in the failure notification group is not 
successfully contacted. 

5. (Original) The method of claim 1 , wherein creating a failure notification group 
includes: 

generating the unique identifier for the failure notification group; 
sending an invitation message containing an application state and the unique identifier to 
each node of the failure notification group; and 

verifying that each member of the failure notification group received the invitation message. 

6. (Original) The method of claim 5, further comprising, if any node in the group of 
nodes fails to receive the invitation, 

signaling a failure notification to nodes that already received the invitation message; and 
executing the failure handling method. 

7. (Original) The method of claim 1, wherein signaling a failure notification includes 
sending a failure notification message to nodes in the failure notification group. 

8. (Original) The method of claim 1, wherein signaling a failure notification includes 
failing to respond to a communication request from a node in the failure notification group. 
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9. (Original) The method of claim 1 , wherein signaling a failure notification includes 
failing to respond only to cornmunication requests related to a failure notification group for which a 
failure has been ascertained. 

10. (Previously presented) The method of claim 1, wherein ascertaining whether a 
failure has occurred includes ascertaining a failure in a communication link to at least one other 
node in the failure notification group. 

1 1 . (Previously presented) The method of claim 1 , wherein ascertaining whether a 
failure has occurred includes receiving from the application an instruction to signal the failure 
notification. 

1 2. (Previously presented) The method of claim 1 , wherein ascertaining whether a 
failure has occurred includes having failed to repair the failure notification group one or more times. 

1 3 . (Previously presented) The method of claim 1 , wherein ascertaining whether a 
failure has occurred includes distinguishing between a communication failure between two nodes 
that are both in the failure notification group and a communication failure between two nodes that 
are not both in the failure notification group. 

14. (Original) The method of claim 1, wherein the failure is ascertained from an 
application pinging each node in the failure notification group, and determining the failure when a 
response to a ping is not received. 

15. (Original) The method of claim 1 , wherein the nodes in the failure notification group 
have a spanning tree topography, wherein the failure is ascertained from an application pinging 
adjacent nodes in the spanning tree, and determining the failure when a response to a ping is not 
received. 
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16. (Canceled) 

17. (Currently amended) The method of claim [[16]] \, wherein the construction 
message is routed to each node in the failure notification group through an overlay routing path, and 
nodes in the overlay routing path record pointers to adjacent nodes in the overlay routing path. 

18. (Canceled) 

19. (Currently Amended) The method of claim [[16]] 1, wherein ascertaining whether 
the failure has occurred includes ascertaining that a communication link to a node in the overlay 
network has failed, and determining whether the node was a member of the multicast tree. 

20. (Original) The method of claim 1 9, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree. 

21. (Original) The method of claim 19, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages from the adjacent nodes. 

22. (Original) The method of claim 19, wherein if the node was a member of the 
multicast tree, executing the failure handling method. 

23. (Currently Amended) A method of guaranteeing failure notification in a distributed 
system operating on a plurality of nodes in a network, the method comprising: 

receiving a unique identifier for a failure notification group, the failure notification group 
comprising the plurality of nodes; 

associating with the unique identifier of the failure notification group a failure handling 
method of a distributed application running on some or all of the nodes of the failure notification 
group; 
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each node in the failure notification group ascertaining whether a failure has occurred; 

each node in the failure notification group that has ascertained a failure signaling a failure 
notification to each reachable node in the failure notification group, wherein each node in the failure 
notification group ascertains a failure or is notified of a failure; and 

each node in the failure notification group executing the failure handling method to perform 
an application level action in response to ascertaining a failure or being notified of a failure .wherein 
the nodes in the failure notification group are a subset of nodes in an overlay network, further 
comprising joining a failure notification tree, including: receiving a construction message from a 
creator node through an overlay routing path; and recording a pointer to adjacent nodes in the 
overlay routing path, further comprising sending a confirmation message to the creator node, 
wherein the construction message is routed to each node in the failure notification group through an 
overlay routing path, and upon receiving the confirmation message, each node in the overlay routing 
path records a pointer to a preceding node, and wherein the confirmation message is routed through 
the overlay routing path in reverse, and upon receiving the confirmation message, each node in the 
reverse overlay routing path records a pointer to a preceding node. 

24. (Original) The method of claim 23, further comprising performing garbage 
collection to disassociate the failure handling method from the application state after the failure is 
ascertained and the failure handling method is executed. 

25. (Original) The method of claim 23, wherein signaling a failure notification includes 
sending a failure notification message to nodes in the failure notification group. 

26. (Original) The method of claim 23, wherein signaling a failure notification includes 
failing to respond to a communication request from a node in the failure notification group, 

27. (Original) The method of claim 23, wherein signaling a failure notification includes 
failing to respond to only communication requests related to a failure notification group for which a 
failure has been ascertained. 
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28. (Previously presented) The method of claim 23, wherein ascertaining whether a 
failure has occurred includes ascertaining a failure in a communication link to at least one other 
node in the failure notification group. 

29. (Previously presented) The method of claim 23, wherein ascertaining whether a 
failure has occurred includes receiving from the application an instruction to signal the failure 
notification. 

30. (Previously presented) The method of claim 23, wherein ascertaining whether a 
failure has occurred includes having failed to repair the failure notification group one or more times. 

3 1 . (Original) The method of claim 23, wherein the failure is ascertained from an 
application pinging each node in the failure notification group, and determining the failure when a 
response to a ping is not received. 

32. (Original) The method of claim 23, wherein the nodes in the failure notification 
group have a spanning tree topology, wherein the failure is ascertained from an application pinging 
adjacent nodes in the spanning tree, and determining the failure when a response to a pin is not 
received. 

33. -34. (Canceled) 

35. (Currently amended) The method of claim [[33]] 23, wherein ascertaining a failure 
includes distinguishing between a communication failure between two nodes that are both in the 
failure notification group and a communication failure between two nodes that are not both in the 
failure notification group. 
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36. (Currently Amended) The method of claim [[33]] 23, wherein ascertaining whether 
the failure has occurred includes ascertaining that a communication link to a node in the overlay 
network has failed, and determining whether the node was a member of the multicast tree. 

37. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree. 

38. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages from the adjacent nodes. 

39. (Original) The method of claim 36, wherein if the node was a member of the 
multicast tree, executing the failure handling method. 

40. (Previously presented) A method of guaranteeing failure notification in a distributed 
system operating on a plurality of nodes in a network, wherein the plurality of nodes are a subset of 
nodes in an overlay network, the method comprising: 

joining a failure notification tree; 

ascertaining a failure in a communication link to an adjacent node in the tree; and 
signaling a failure notification when the failure is ascertained, 
wherein joining the failure notification tree includes: 

receiving a first message from a creator node of a failure notification group through 
an overlay routing path; 

recording a pointer to an overlay node from which the first message was received; 
forwarding the first message to a node in the failure notification group via a next 
node in the overlay routing path; 

receiving a second message from the node in the failure notification group through 
the overlay routing path; 
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recording a pointer to an overlay node from which the second message was received; 

and 

forwarding the second message to the creator node via the overlay node from which 
the first message was received. 

41. (Canceled) 

42. (Previously presented) The method of claim 40, further comprising recording a 
pointer to the next node. 

43. (Canceled) 

44. (Original) The method of claim 40, wherein ascertaining a failure includes 
distinguishing between a communication failure between two nodes that are both in the failure 
notification group and a communication failure between two nodes that are not both in the failure 
notification group. 

45. (Original) The method of claim 40, wherein ascertaining a failure includes having 
failed to repair the failure notification group one or more times. 

46. (Original) The method of claim 40, wherein ascertaining the failure includes 
ascertaining that a communication link to a node in the overlay network has failed, and determining 
whether the node was a member of the multicast tree. 

47. (Original) The method of claim 46, wherein if the node was a member of the 
multicast tree, signaling a failure notification to adjacent nodes in the multicast tree by not 
responding to messages from the adjacent nodes. 



48-52. (Canceled) 



